Is apache-skywalking safe to use?

apache-skywalking has 1 known vulnerabilities on the latest version (1.2.0). DepScope rates its health at 36/100 (critical risk).

What is the latest version of apache-skywalking?

The latest version of apache-skywalking is 1.2.0, released 2025-05-11.

Yes. apache-skywalking has 1 known vulnerabilities. See depscope.dev/pkg/pypi/apache-skywalking for details.

No, apache-skywalking is actively maintained. Latest release: 1.2.0 (2025-05-11).

Popular alternatives to apache-skywalking in PyPI include: boto3/, packaging, urllib3/, certifi, urllib3.

apache-skywalking is licensed under Apache-2.0.

pypiv1.2.0

The Python Agent for Apache SkyWalking, which provides the native tracing/metrics/logging/profiling abilities for Python projects.

License Apache-2.0permissive12 versions1 maintainers10 deps

/ 100

Health

do not use

apache-skywalking has critical vulnerabilities — do not use

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

15/25

security

9/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2020-13921	Resolved Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.	—

Dependencies (10)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/apache-skywalking